The bank contacted about 2 million affected debit card members Saturday and said they would be limited to a maximum of $100 cash withdrawals and $300 in purchases per day. Less than 10 percent of Chase customers are affected, said spokeswoman Kristin Lemkau.

The limits will be in place until Chase replaces the cards. Chase credit cards are not restricted.

Target on Thursday said data connected to about 40 million credit and debit card accounts was stolen as part of a breach that began over the Thanksgiving weekend. The stolen data included customer names, credit and debit card numbers, card expiration dates and the embedded code on the magnetic strip found on the backs of cards.